$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/375BB2985478673C260242A779568A4435FE5916.cer File: 375BB2985478673C260242A779568A4435FE5916.cer (raw, json) Hash identifier: bGMLWTbZcv7Q3obvd8chGGCj5oDE8TjyDVagU6odZqw= Subject key identifier: 37:5B:B2:98:54:78:67:3C:26:02:42:A7:79:56:8A:44:35:FE:59:16 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4927886855B6E1D7D2D044272BACB637CD308A09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:35:13 +0000 Certificate not after: Sun 02 May 2027 01:40:13 +0000 Subordinate resources: IP: 103.77.156.0/22 IP: 2407:9c80::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:27:88:68:55:b6:e1:d7:d2:d0:44:27:2b:ac:b6:37:cd:30:8a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:35:13 2026 GMT Not After : May 2 01:40:13 2027 GMT Subject: CN=375BB2985478673C260242A779568A4435FE5916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6f:35:d3:fc:9d:7b:a8:49:c2:7a:39:3b:c2: e9:ef:6c:0f:1f:30:c6:b0:14:ac:60:24:b0:4e:fe: 0c:51:df:3d:fd:06:0c:de:29:a6:34:34:9b:3e:64: 21:52:b9:69:aa:7c:5a:2d:50:5e:ee:af:09:19:5e: a0:e1:a3:7e:35:51:96:c0:97:d2:6f:75:fb:bb:6a: 71:09:ee:d9:38:dc:bd:b4:13:59:0e:77:1b:62:ce: 6e:b5:d7:e8:d1:9b:6e:02:4b:fb:48:4b:f3:c4:17: 27:15:ff:8e:05:99:ef:86:2c:3b:af:ad:f4:15:f2: 84:64:0b:b4:b4:99:f4:27:f3:29:55:f0:6d:0e:34: e9:ae:b4:69:c2:55:cc:a8:c1:0c:c6:2c:d1:39:01: a9:38:b4:2a:f7:e9:21:5c:85:c4:86:49:c7:82:28: f5:35:d9:f4:b7:fe:db:d2:33:ed:d3:b7:d9:f9:18: 79:2a:16:30:0d:c0:56:ed:b5:65:ec:22:7f:94:8d: db:f7:38:b3:19:bf:45:5b:87:28:5f:66:40:33:65: ca:8b:22:63:12:b1:06:47:5d:17:06:8b:ad:c1:8e: 09:55:3e:4d:de:18:13:0e:3b:64:e1:c2:ba:a4:5d: 32:ce:c5:56:87:91:89:fe:4e:20:d8:43:b3:16:f4: 18:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:5B:B2:98:54:78:67:3C:26:02:42:A7:79:56:8A:44:35:FE:59:16 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.77.156.0/22 IPv6: 2407:9c80::/32 Signature Algorithm: sha256WithRSAEncryption 09:08:03:9b:14:41:09:88:d0:be:8f:31:03:88:0d:aa:41:ce: d1:20:d3:29:35:1a:1c:6d:64:a4:48:69:4e:78:e3:71:dc:8a: cb:29:0c:44:bd:7f:7b:0c:8f:ca:d7:1b:a3:d2:e8:16:19:c9: 82:d8:a1:d9:24:d2:cc:22:0b:67:4b:a8:1f:c5:3d:02:ff:9e: a0:5b:fe:65:2e:95:3d:f9:02:97:ab:9c:8e:09:8f:77:17:bc: e6:c2:97:e7:3d:f5:3a:08:f4:c1:d2:41:97:65:2f:76:9c:fe: 9b:06:45:61:cd:09:c6:2c:3d:44:c1:86:bb:90:af:1b:ec:37: ca:e1:45:72:d5:24:0e:d9:4d:3e:97:33:e2:20:07:aa:0b:fe: 7a:34:52:62:83:65:e3:d0:7f:36:98:b0:0f:b1:0f:cd:fe:5f: e9:f7:76:5d:0c:14:15:b6:9a:15:be:39:a5:37:83:28:45:b4: 6d:32:3a:27:50:9f:29:29:03:2d:77:b3:ed:c4:f9:38:69:79: f0:74:7f:fb:55:7c:c6:07:12:25:13:f8:7b:7a:86:f0:0a:64: b3:1a:d4:23:4b:86:30:69:41:30:51:87:44:8d:b6:2e:d0:10: 3d:14:80:7c:8a:fd:28:74:b5:5c:15:24:cb:dc:d4:5e:4d:14: 43:f1:7a:46 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUSSeIaFW24dfS0EQnK6y2N80wigkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzUxM1oX DTI3MDUwMjAxNDAxM1owMzExMC8GA1UEAxMoMzc1QkIyOTg1NDc4NjczQzI2MDI0 MkE3Nzk1NjhBNDQzNUZFNTkxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMdvNdP8nXuoScJ6OTvC6e9sDx8wxrAUrGAksE7+DFHfPf0GDN4ppjQ0mz5k IVK5aap8Wi1QXu6vCRleoOGjfjVRlsCX0m91+7tqcQnu2TjcvbQTWQ53G2LObrXX 6NGbbgJL+0hL88QXJxX/jgWZ74YsO6+t9BXyhGQLtLSZ9CfzKVXwbQ406a60acJV zKjBDMYs0TkBqTi0KvfpIVyFxIZJx4Io9TXZ9Lf+29Iz7dO32fkYeSoWMA3AVu21 Zewif5SN2/c4sxm/RVuHKF9mQDNlyosiYxKxBkddFwaLrcGOCVU+Td4YEw47ZOHC uqRdMs7FVoeRif5OINhDsxb0GE8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDdbsphUeGc8JgJCp3lWikQ1/lkWMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FjM2YyMjg4LTg4Y2YtNGQyYi1iYmE2LWEwM2RkNWY4Mzc2MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hYzNmMjI4 OC04OGNmLTRkMmItYmJhNi1hMDNkZDVmODM3NjEvMC8zNzVCQjI5ODU0Nzg2NzND MjYwMjQyQTc3OTU2OEE0NDM1RkU1OTE2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ02cMA0EAgACMAcDBQAkB5yAMA0GCSqGSIb3DQEBCwUAA4IBAQAJCAObFEEJ iNC+jzEDiA2qQc7RINMpNRocbWSkSGlOeONx3IrLKQxEvX97DI/K1xuj0ugWGcmC 2KHZJNLMIgtnS6gfxT0C/56gW/5lLpU9+QKXq5yOCY93F7zmwpfnPfU6CPTB0kGX ZS92nP6bBkVhzQnGLD1EwYa7kK8b7DfK4UVy1SQO2U0+lzPiIAeqC/56NFJig2Xj 0H82mLAPsQ/N/l/p93ZdDBQVtpoVvjmlN4MoRbRtMjonUJ8pKQMtd7PtxPk4aXnw dH/7VXzGBxIlE/h7eobwCmSzGtQjS4YwaUEwUYdEjbYu0BA9FIB8iv0odLVcFSTL 3NReTRRD8XpG -----END CERTIFICATE-----Generated at Wed May 13 01:36:20 2026 by rpki-client